$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json) Hash identifier: dbg0TDtigNqG17j1zDh5FAMzU9YkURjA7Ml3k5nhOxU= Subject key identifier: F1:08:EE:0F:16:12:C2:85:CC:93:C9:6C:B6:49:34:8C:55:AD:B6:16 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 0199FD6AE69B245DF3F67E52ADE765BAF368 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft Manifest number: 1681 Signing time: Sun 19 Oct 2025 17:01:05 +0000 Manifest this update: Sun 19 Oct 2025 17:01:05 +0000 Manifest next update: Mon 20 Oct 2025 17:01:05 +0000 Files and hashes: 1: 2CeWoGzDWl6UkY36SIUH1OhgWjI.roa (hash: SpuPtcO5oh6qYeICaLjHEnb1AyuNec5O8bsGPbWlXR0=) 2: 2OyaFSjBRoREDHEMRffL3EbO-HE.roa (hash: nXI4OkiYa5c+MjdVzqLFFZ3ZGswBHizjRFddCRvE7B8=) 3: 3wwIi79zg2SGivGdrN-g0LB5ULQ.roa (hash: RzCIbHY1nS76gIylPt0Y25UbcEOAlA6M3aFOCeIxSG4=) 4: 7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa (hash: gAGdIZGspYyJlvskZ74rsTfXVPxswIlGbLI3PkYprvU=) 5: EUICRwNR8sR91Lfm3GIv3mdVr9k.roa (hash: ua1xjRnUek2cLwApq/HW3bjCZKfJsqGGvp16wgKp8P0=) 6: HYkelKhWY7NiPV2rIoXC5vMsggM.roa (hash: 8m611pZGVk4ujPG9J04iZxFPYTUOzYbyGd2fDqvqZP4=) 7: Jhq91rxsv2WDUPAoN1fbsyaCM6g.roa (hash: nybfHNUP7zn/KmMoeiwkEEs96tiChMxH1OSoiBocUXI=) 8: Melq7PLQcz-P184ktmpNOP2H3e4.roa (hash: bGaw09MG/JnAsEfDppYWkhFJuztc0B+a9Nz0AQOqrUY=) 9: Q4BLVnTtEyoC8eHyhkcteKoeJ6A.roa (hash: edQEuSj12spKEsnnwc1oyC8FT8MhVl13a4ooOoJq0ys=) 10: RWf3DVveZH4QLyKGQca82kY-7Qw.roa (hash: V22GqObY+hDoy85YYLCgPS5lAieuM7VmlAbZz3/L7ZM=) 11: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: XoqsZX8hGDTAYm0f/mvPhrJKlzJvFdEG5ExMHteh9ls=) 12: jbUG9pTk9em_fTHbjoEIhua3pK0.roa (hash: 4tGn3tkK46T9dFOLGdw2zw9ukjnxUtA/PXFwlS5np88=) 13: l63ezx_M0iAM5dKGQZtcWd8xPmQ.roa (hash: qf8bDHKpJxynQt1q7hXqJrXbCZfUxZZ7MBpbrfJkMcU=) 14: lkgJ8Vsd8ocb4eicMkQ6N3ZL26E.roa (hash: 9Yz4K7Z8z/hwTeoXB4iHYgi23xVHLoum6nVhNj0Tjmc=) 15: txxKQQE40wffgCtcTH6E5WrYYhY.roa (hash: td5UTouO1Nf7RuKTOrzSb6h5NfM7Vvfby16oyueCQko=) 16: zBonQZgEPDvj1nGNR_bu7NzMU0U.roa (hash: s94OjMSrqoWnsXwDlW8kAk2CQ0Z0teuNflnJXhN+I6g=) 17: zg1raSPKfpMRz7s0HIi-A3JYptA.roa (hash: kmxhHZd/GJPpQ6FeMLmxw983rJJvr08+WYaMz1jD/YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:6a:e6:9b:24:5d:f3:f6:7e:52:ad:e7:65:ba:f3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Oct 19 17:01:05 2025 GMT Not After : Oct 20 17:01:05 2025 GMT Subject: CN=f108ee0f1612c285cc93c96cb649348c55adb616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:85:7e:c4:9b:93:76:f6:35:1e:89:4e:58:51: 51:ef:39:0c:7c:07:43:dd:f4:39:82:ae:4f:4c:14: a2:15:0d:06:5e:92:cd:a8:d5:2e:c7:5d:e3:aa:a0: f1:3b:92:63:c5:35:bc:22:d9:ad:38:ef:cc:8b:e1: 1b:ac:bb:ce:d4:6f:ba:13:76:3d:dd:0e:98:27:5b: 8c:7f:b5:db:da:80:8c:42:d9:ed:ba:42:29:1b:3b: 71:ce:04:c8:6d:a7:fd:a1:0e:e3:8c:35:5e:1a:f6: b6:8d:b5:13:8c:fb:03:49:e9:e1:69:07:a6:8d:c7: f5:22:6f:3a:24:8b:cb:c9:42:12:55:12:06:e5:53: 02:45:86:fa:38:bd:1d:4a:e2:9b:a8:b5:b1:2a:9b: 93:a0:ca:96:65:93:7a:b8:e3:31:db:0e:22:f8:3f: 7e:b5:14:f6:a0:b1:b8:9a:cb:d4:5b:7b:33:cc:97: b0:b3:a5:b3:63:44:21:3f:81:9d:70:c9:85:98:e4: 5b:9e:d4:d2:27:bf:8d:46:1e:b0:1a:15:13:fa:18: c3:53:a3:c4:86:c0:e1:c6:72:ba:fe:70:e7:15:74: 6e:ca:0f:4c:05:04:d7:28:9a:a9:13:78:c1:bb:ab: 8c:9a:cd:e8:f0:d5:4d:d5:e0:91:d0:3a:48:17:92: 7f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:08:EE:0F:16:12:C2:85:CC:93:C9:6C:B6:49:34:8C:55:AD:B6:16 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7f:06:a8:a7:db:77:0c:48:8b:de:b2:bc:47:af:14:c7:45: de:ea:17:58:f3:72:20:cc:76:39:f2:63:3e:95:91:6e:14:3b: 0c:5e:ec:c2:ae:e5:97:66:4c:b5:51:45:11:ba:fb:e0:62:45: a8:b2:6c:2a:42:cf:c1:7a:6c:7c:3a:b1:08:60:57:bf:7b:a1: 2a:30:52:ef:66:c1:09:a2:75:ab:ca:d8:5a:48:f0:73:f3:2c: 4f:c9:b8:49:6e:46:9a:93:2d:35:c8:ae:17:b2:2a:de:7d:91: 44:ee:79:ee:7b:86:7b:56:a0:b0:e1:e5:5a:11:9e:20:f6:69: e1:f0:f5:5a:24:a8:d7:d9:32:e3:e7:51:bf:69:1e:9c:6f:db: 18:ee:ca:49:2f:10:0b:ca:d3:58:4a:09:a5:a0:9b:11:9c:c2: 3f:03:f1:6d:23:07:46:83:e8:cf:cd:fd:88:2e:c9:e4:98:0a: dc:f4:c6:04:6e:bc:d4:bf:c8:e7:a5:a0:d4:f2:85:19:7e:37: 09:07:c9:62:89:d4:d5:02:d9:4f:28:73:b0:bf:41:7e:98:7a: d3:41:05:0a:bd:36:3d:09:a9:d0:c8:dd:27:7f:35:3e:6e:0f: 9f:93:16:7b:e9:75:db:4c:ca:8b:6d:bb:70:2f:d7:3d:f2:a0: 6f:6a:4a:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9auabJF3z9n5SredluvNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjUxMDE5MTcwMTA1WhcNMjUxMDIwMTcwMTA1WjAzMTEwLwYDVQQD EyhmMTA4ZWUwZjE2MTJjMjg1Y2M5M2M5NmNiNjQ5MzQ4YzU1YWRiNjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIV+xJuTdvY1HolOWFFR7zkMfAdD 3fQ5gq5PTBSiFQ0GXpLNqNUux13jqqDxO5JjxTW8ItmtOO/Mi+EbrLvO1G+6E3Y9 3Q6YJ1uMf7Xb2oCMQtntukIpGztxzgTIbaf9oQ7jjDVeGva2jbUTjPsDSenhaQem jcf1Im86JIvLyUISVRIG5VMCRYb6OL0dSuKbqLWxKpuToMqWZZN6uOMx2w4i+D9+ tRT2oLG4msvUW3szzJews6WzY0QhP4GdcMmFmORbntTSJ7+NRh6wGhUT+hjDU6PE hsDhxnK6/nDnFXRuyg9MBQTXKJqpE3jBu6uMms3o8NVN1eCR0DpIF5J/UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEI7g8WEsKFzJPJbLZJNIxVrbYWMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPH8GqKfb dwxIi96yvEevFMdF3uoXWPNyIMx2OfJjPpWRbhQ7DF7swq7ll2ZMtVFFEbr74GJF qLJsKkLPwXpsfDqxCGBXv3uhKjBS72bBCaJ1q8rYWkjwc/MsT8m4SW5GmpMtNciu F7Iq3n2RRO557nuGe1agsOHlWhGeIPZp4fD1WiSo19ky4+dRv2kenG/bGO7KSS8Q C8rTWEoJpaCbEZzCPwPxbSMHRoPoz839iC7J5JgK3PTGBG681L/I56Wg1PKFGX43 CQfJYonU1QLZTyhzsL9Bfph600EFCr02PQmp0MjdJ381Pm4Pn5MWe+l120zKi227 cC/XPfKgb2pKWA== -----END CERTIFICATE-----Generated at Sun Oct 19 20:42:20 2025 by rpki-client